Date: Sun, 29 Jul 2001 10:48:07 +0200 (CEST) From: Cleto Pescia <cleto@eurisco.com> To: "Russell J. Lahti" <russell@ajboggs.com> Cc: <freebsd-questions@FreeBSD.ORG> Subject: Re: ps ax shows login after 4.2-RELEASE -> 4-STABLE upgrade Message-ID: <Pine.BSF.4.33.0107291042400.317-100000@venus.e-link.ch> In-Reply-To: <996356654.3b63322eb6268@www.ajboggs.com>
next in thread | previous in thread | raw e-mail | index | archive | help
> > I'm sorry if this question sounds odd, but I just noticed a strange > > thing after having updated a 4.2-RELEASE box to 4-STABLE with make world: > > When I issue "ps ax", I see a login line for each user (login -p > > <username>) who is logged on. I have never seen something like that on > > other FreeBSD boxes. Is something wrong or is that an expected > > behaviour? Searching the mailing-lists archives did not return anything > > relevant. Apart from that, up to now the box seems to be working just fine. > --------------------------------------------- > > It could very well be a trojan login command, but thats just > a possibility. I would be sure to check on it if I were you > though. With all of the telnetd problems still happening and > all.. I've fixed a few boxes for other people with trojan login > scripts put in place. Ok, but the only thing I did was to cvsup the sources and to follow the Handbook to rebuild world. I doubt that a trojan login command could sneak in to the STABLE source repository. In any case, what should I check in order to find out whether login is a trojan horse or not? > Then again, it may be nothing at all, but I don't see those > results on *any* of my 4.3-S systems. When did you last update your sources with cvsup? I've done it a week ago. Cleto To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.33.0107291042400.317-100000>